Privacy policy

Last updated: 30 October 2026

SSL Checker is a browser extension that shows the TLS certificate of the website in your active tab and compares it with what notary servers see from elsewhere on the internet.

What the extension reads. Only when you open its popup, and only after you agreed to it there: the address of the active tab (to know which site to check) and, if reading from the browser is enabled, the certificate chain and connection parameters of that tab, read through Chrome's debugger interface. It does not read page content, cookies, passwords, form data, other tabs or your browsing history.

What leaves your device. Nothing before you agree. Then, when you check a site, its host name and port are sent to the PlusPrivacy notary (notary.plusprivacy.com), run by the developer of SSL Checker, unless you turned it off; and to the notary servers you add in Options, together with the access token you entered for a server, if any. Each request also carries a random number, used only to check that the answer was made for it. Nothing else is sent to the developer. There is no analytics, tracking, advertising or account.

The PlusPrivacy notary. It uses the host name and port only to connect to that site and return the certificate the site presents. It writes nothing to disk and keeps no record of the sites checked. In memory it keeps each answer for 60 seconds, so that a site is not contacted again for every request, and it counts requests per network address to stop abuse; an address that abuses it is blocked for up to 24 hours and appears in its log. All requests to it are encrypted (HTTPS), and the name of the site travels in the body of the request, never in its address. It signs each answer, so that the extension can tell it was not changed on the way.

What is stored. Your agreement and your settings (the PlusPrivacy notary on or off, reading mode, notary addresses, tokens and keys, timeout) are stored with chrome.storage.local on your device. The result of the last check for each tab is kept with chrome.storage.session and is deleted when you close the tab or the browser. If site memory is on (the default when the certificate is read from the browser), the host name of each site you check and the certificate authority it used (name, key fingerprints, dates and number of checks) are also stored with chrome.storage.local, so that SSL Checker can warn you when a site suddenly presents a different authority. Nothing is recorded from incognito windows. This data never leaves your device; you can turn the memory off or delete it in Options, and sites unseen for 400 days are deleted automatically.

Third parties. The notary servers you add are operated by you or by whoever you choose; their own policies apply. SSL Checker's use of the data it handles complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Contact. mastaleru.rafael@gmail.com · LinkedIn